Microsoft Investigation – Threat actor consent phishing campaign abusing the verified publisher process

Summary On December 15th, 2022, Microsoft became aware of a consent phishing campaign involving threat actors fraudulently impersonating legitimate companies when enrolling in the Microsoft Cloud Partner Program (MCPP) (formerly known as Microsoft Partner Network (MPN)). The actor used fraudulent partner accounts to add a verified publisher to OAuth app registrations they created in Azure …

Microsoft Investigation – Threat actor consent phishing campaign abusing the verified publisher process Read More »

abusing accounts actor app aware azure campaign cloud companies consent consent phishing december fraudulent impersonating investigation microsoft microsoft cloud msrc network oauth partner partner program phishing phishing campaign process program publisher registrations threat threat actor threat actors verified verified publisher